1/ Today @milenkowski.bsky.social from @sentinellabs.bsky.social and I are publishing a project we've been working on over the past few months. We found suspected China- and India-linked espionage actors independently targeting the same victim: #Balochistan Police in #Pakistan. s1.ai/spy2flags

Committee to protect "some' journalists more like it

Rav@rvbdrm.com · last mo.

"The Board of CPJ will formally change its definition of who qualifies as a journalist, to broadly exclude slain Palestinian and Lebanese journalists who worked for government-funded media outlets." From Mohammed El-Kurd (editor-at-large at Mondoweiss.)

Did DoD just admit in a court filing that it used xAI's Grok Gov Model to hit the girls' school on the first day of the Iran war? Based on some passages flagged by @rgoodlaw.bsky.social in DoD's recent filing in NAACP's case against X, it looks like it did 1/

Tomorrow is my last day at Amnesty International's Security Lab. I left to do my own thing. More on that soon!! For now i'm going on a sabbatical for a couple months.

Scoop: Central Command is getting reports that military personnel are being targeted using commercially available location data. Few details available, but it’s a sign that the tech industry’s advertising-surveillance complex is having consequences on the battlefield. www.reuters.com/business/med...

Exclusive: Pentagon says US military personnel are reportedly being targeted using location data

It's an illustration of how the global surveillance ‌economy is shaping the battlefield.

reuters.com

Vor drei Jahren hat die Staatsanwaltschaft vier Manager von FinFisher angeklagt. Die Ermittler werfen dem Münchener Unternehmen vor, ihren Staatstrojaner ohne Genehmigung an die Türkei verkauft zu haben. Seitdem ist nichts passiert. Das Gericht prüft und prüft. netzpolitik.org/2023/unsere-...

Staatsanwaltschaft klagt Manager von FinFisher an

Der deutsche Staatstrojaner-Hersteller FinFisher muss sich vor Gericht verantworten. Die Staatsanwaltschaft hat vier ehemalige Geschäftsführer angeklagt. Sie wirft ihnen vor, ihre Überwachungstechnolo...

netzpolitik.org

Spoke to Wired Greece about Predator and their new infection vector through online advertisement, Aladdin: wired.com.gr/article/i-an...

Η ανατομία του Predator - WIRED Greece

Η υπόθεση του Predator ήρθε ξανά στο προσκήνιο με την απόρριψη αιτήματος για ανάσυρση της δικογραφίας. Παράλληλα, προκύπτουν νέοι, πιο ύπουλοι τρόποι μόλυνσης.

wired.com.gr

The Chinese Government Just Got the World’s Largest Digital Rights Conference Canceled www.wired.com/story/the-ch...

The Chinese Government Just Got the World’s Largest Digital Rights Conference Canceled

Access Now, the group that organizes RightsCon, says Zambian officials asked it to exclude Taiwanese participants if it wanted the event to proceed as planned.

wired.com

Following our April 29 announcement, we believe it's important to be transparent about the context that led to the decision. We want to explain, where we can, why this was made on such short notice, only days before we were set to host RightsCon. Read: www.rightscon.org/rc26-stateme...

A statement to our community about why RightsCon 2026 will not take place in Zambia

Our official statement to the digital rights community about why RightsCon 2026 will not take place in Zambia

rightscon.org

Intellexa had a secret US partner with government ties that fed it Android and iOS exploits on a revenue sharing scheme 🫥 via @jurrevanbergen.nl www.antenna.gr/ereynes/arti...

NEW: Researchers have have exposed yet another spyware maker that develops fake Android apps for its government customers. The apps were pushed with help of telecom providers. And it's yet another Italian company: IPS, which until now was only known to make traditional wiretapping systems.

Another spyware maker caught distributing fake Android snooping apps | TechCrunch

Researchers have found a new case where government authorities used a fake Android app to plant spyware on a target’s phone. The company that allegedly developed the spyware was not previously known t...

techcrunch.com

@interseclab.bsky.social published new research and looking at the supply chain based on the Geedge Networks leak. MADLink - A Taiwanese Vestige in the Geedge Supply Chain. interseclab.org/research/mad...

MADLink: A Taiwanese Vestige in the Geedge Supply Chain | InterSecLab

New findings expose a Taiwanese vestige in Geedge Networks' supply chain: 1,708 ADLINK units enabling state-level surveillance systems exported to authoritarian governments.

interseclab.org

“🇬🇷Greek newspaper @tovimagr.bsky.social has reported that a previously undisclosed memorandum of cooperation was signed between a consortium involving the spyware-linked company Intellexa and a technology unit of Greece’s National Intelligence Service.” www.dnews.gr/eidhseis/new...

Get me out of this reality wtf

Brandon Friedman@brandonfriedman.bsky.social · 4mo ago

This is real

WhatsApp told 200 users - mostly Italian - they installed phony version of the app containing spyware. Fake messaging app was created by spyware firm SIO. WhatsApp says attacks were "highly targeted" and result of social engineering. SIO works with the Italian govt. therecord.media/whatsapp-war...

WhatsApp warns users of fake app used to distribute spyware

The Meta subsidiary alleges that Italy’s SIO spyware manufacturer designed the phony app specifically for iPhones. Most of the impacted users are in Italy, according to a WhatsApp announcement.

therecord.media

Threat Actors are "Bringing Their Own Forensics" In a recent ClickFix campaign, we saw threat actors likely related to Interlock Ransomware, running Volatility (vol.py) directly on victim machines. Commonly a tool for defenders, the TAs are using it to:

lmao #sabu

I got this fixed, hurray!

Jurre van Bergen@jurrevanbergen.nl · 5mo ago

The DEA had an issue resetting passwords for accounts that can submit FOIA's for over a year with no end in sight it seems? Very frustrating.

The DEA had an issue resetting passwords for accounts that can submit FOIA's for over a year with no end in sight it seems? Very frustrating.

Curious. Former head of the Dutch Intelligence Service. Rob Bertholee, joined Dataflow Security on the advisory board.

Really awful news. Rest in power Jason.

Chris Wysopal@weld.bsky.social · 6mo ago

My wife @debdebdeb.bsky.social and I are heartbroken to share the sad news that our old friend @jasonsnitker.bsky.social AKA Parmaster, has passed away.

Blood boiling

WakeMeWhenItsOver😴@zelbel.bsky.social · 6mo ago

According to the FBI, Trump was accused credibly of raping a child in the early 80's. They interviewed the victim 4 times to collect testimony, but now DOJ has removed records of the investigation from the released Epstein files. Trump was also accused by a victim that helped convict Maxwell...

When Zero-Knowledge Proofs Are Not Enough: Lessons from a Real-World Zero-Knowledge Authorization System, a.k.a Analysis and Vulnerabilities in zkLogin (eprint.iacr.org/2026/227) (1/n)

Bro wanted more money for knock off watches??

Zack Whittaker@zackwhittaker.com · 6mo ago

Prosecutors have confirmed for the first time that Peter Williams, who ran L3Harris' Trenchant unit (which makes hacking tools for the U.S. govermment and its allies), sold the company's exploits to a Russian broker that were capable of accessing "millions of computers and devices" around the world.

The general counsel uploaded a picture on Linkedin showing the web panel of Paragon's spyware. The panel shows a phone number in Czechia, Apps, Accounts, media on the phone, the interception status and numbers extracted from social media applications.

Don't tell North Korea!

Zach Everson@zacheverson.com · 6mo ago

New: Binance holds 87% of the Trump family's stablecoin—$4.7 billion—a higher concentration than any other major stablecoin has at any single exchange. Its U.S. affiliate holds $1,119. me, for @forbes.com

Microsoft is handing over Bitlocker keys to law enforcement. www.forbes.com/sites/thomas...

Microsoft Gave FBI BitLocker Encryption Keys, Exposing Privacy Flaw

The tech giant said providing encryption keys was a standard response to a court order. But companies like Apple and Meta set up their systems so such a privacy violation isn’t possible.

forbes.com

www.theguardian.com/world/2026/j... "Spain’s highest criminal court has again shelved its investigation into the use of Pegasus software to target the mobile phones of senior Spanish ministers, including the prime minister, citing a chronic lack of cooperation from the Israeli authorities."

Spanish court points finger at Israel as it drops Pegasus spyware case again

Judge shelves inquiry into use of Israeli-made software to target ministers’ phones citing chronic lack of cooperation

theguardian.com

Goes to Palantir

Federal US domain bot@fed-us-domain-bot.bsky.social · 7mo ago

🚀 NOTICE: Federal US website newly registered. https://foreignfundinghighered.gov Action taken by the Department of Education (OCIO) at or around 2025-11-25 06:13:23.

we all knew all along. www.volkskrant.nl/politiek/d66...